NNSquad - Network Neutrality Squad

NNSquad Home Page

NNSquad Mailing List Information

 


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[ NNSquad ] Adobe signing certificate compromised


Adobe signing certificate compromised

http://j.mp/Qso7Uv  (Adobe)

  "We recently received two malicious utilities that appeared to be
   digitally signed using a valid Adobe code signing certificate. The
   discovery of these utilities was isolated to a single source. As soon
   as we verified the signatures, we immediately decommissioned the
   existing Adobe code signing infrastructure and initiated a forensics
   investigation to determine how these signatures were created. We have
   identified a compromised build server with access to the Adobe code
   signing infrastructure. We are proceeding with plans to revoke the
   certificate and publish updates for existing Adobe software signed
   using the impacted certificate. This only affects the Adobe software
   signed with the impacted certificate that runs on the Windows platform
   and three Adobe AIR applications* that run on both Windows and
   Macintosh. The revocation does not impact any other Adobe software for
   Macintosh or other platforms."

 - - -

--Lauren--
Lauren Weinstein (lauren@vortex.com): http://www.vortex.com/lauren 
Co-Founder: People For Internet Responsibility: http://www.pfir.org/pfir-info
Founder:
 - Network Neutrality Squad: http://www.nnsquad.org 
 - PRIVACY Forum: http://www.vortex.com/privacy-info
 - Data Wisdom Explorers League: http://www.dwel.org
 - Global Coalition for Transparent Internet Performance: http://www.gctip.org
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Google+: http://vortex.com/g+lauren / Twitter: http://vortex.com/t-lauren 
Tel: +1 (818) 225-2800 / Skype: vortex.com
_______________________________________________
nnsquad mailing list
http://lists.nnsquad.org/mailman/listinfo/nnsquad